Examining the Information Security Awareness Levels of Healthcare Workers and Their Attitudes Towards the Privacy of Electronic Health Records

Abstract The aim of the study is to examine the awareness levels of individuals working in the health sector regarding information security and their attitudes toward the confidentiality of electronic health records. The research was conducted with 359 participants from all individuals working in the health sector in Istanbul who participated in the study voluntarily. Data were collected via an online survey. The distribution of sociodemographic and workplace data of individuals is shown in frequency tables. Independent two-sample t-tests, one-way analysis of variance, Mann–Whitney U-test, and Kruskal-Wallis tests were used to examine the differences between groups. The SPSS version 25 program was used in the analysis. Most healthcare workers were women (64.6%), between the ages of 26–35 (44%), and had undergraduate education (46.5%). It has been observed that employees’ attitudes toward the confidentiality of electronic health records are inadequate. Information security awareness level is generally at a medium level (3.62 ± 0.93 and 3.20 ± 1.03). Awareness levels vary between groups depending on the unit they work in, their education level, and title. Moreover, the awareness levels of employees who receive information security training are significantly higher than those who do not receive information security training. To conclude, healthcare professionals need training in information security. Cite this article as: Şahin, M., & Özaydın, Ö. (2024). Sağlık çalışanlarının bilgi güvenliği farkındalık düzeylerinin ve elektronik sağlık kayıtlarının gizliliğine ilişkin tutumlarının incelenmesi. Journal of Business Administration and Social Studies, 8(2), 123-131.